This Week’s Cyber Security News
- Personal information of approximately 66,000 vehicle insurance policyholders from Clal Insurance, including ID numbers, names, phone numbers, and insurance details, is being offered for sale for $15,000. Clal Insurance stated that the information did not leak from the company’s systems and is likely sourced from an insurance agency that works with many companies in the industry.
- The Iranian hacking group Handala claims to have breached data belonging to Harel Insurance. The group published screenshots that it says demonstrate access to personal data of policyholders and stated that it holds 154 GB of information.
- An attacker claims to have breached the data of Pardes Institute and the GoTravel website, offering for download approximately 27,000 records from Pardes Institute and around 60,000 records from GoTravel.
- An attacker is selling administrative access to SAP systems of a bank in Israel for $30,000. Additionally, the attacker is offering access to the source code and the CI/CD environment of a company in the telecommunications sector for $10,000. Furthermore, the attacker is selling 1.8 million records, claiming they belong to Clalit Health Services, for $50,000.
The Cyber Authority Warns: A Phishing Website is Attempting to Steal Credit Card Details
The National Cyber Authority warns of a fake website impersonating its official site, distributed through suspicious links on questionable websites. The site uses a copy of the top section of the Authority’s website and requests credit card details— a request that the Authority would never make.
The scam is based on intimidation and is part of a series of similar fraudulent attempts discovered in recent months, operating under the.
“The successful method” method. The public is urged to avoid entering credit card details on this website.
Ransomware Attacks Continue to Break Records: A Sharp Increase in the Number of Reported Victims.
In November, there was a dramatic increase in the number of victims published on leak sites by hacking groups. During this month, 700 new victims were reported—a 39% rise compared to November 2023 and an impressive 165% increase compared to November 2022.
Since the beginning of the year, 5,452 victims have been reported, reflecting a 13.5% increase compared to the same period last year, and a 130% surge compared to the same period in 2022.
In response to the growing threat, the National Cyber Authority published the comprehensive document “Securing Public Cloud Services in Light of the Ransomware Threat.” The booklet, which spans over 100 pages, provides in-depth information about the threat and ways to address it, along with recommendations for active protection in the digital environment.
For more information: https://www.gov.il/he/pages/alert_1810b
